PDA

View Full Version : چه نوعی انکدیه؟



Tarragon
سه شنبه 07 شهریور 1391, 16:12 عصر
سلام من یه فایل دارم نمی دونم با چی انکد شده می شه کمکم کنید که با چی انکد شده و چطوری دیکدش کنیم؟
<?php if (!function_exists("T7FC56270E7A70FA81A5935B72EACBE29")) { function T7FC56270E7A70FA81A5935B72EACBE29($TF186217753C37B 9B9F958D906208506E) { $TF186217753C37B9B9F958D906208506E = base64_decode($TF186217753C37B9B9F958D906208506E); $T7FC56270E7A70FA81A5935B72EACBE29 = 0; $T9D5ED678FE57BCCA610140957AFAB571 = 0; $T0D61F8370CAD1D412F80B84D143E1257 = 0; $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[1]) << 8) + ord($TF186217753C37B9B9F958D906208506E[2]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA = 3; $T800618943025315F869E4E1F09471012 = 0; $TDFCF28D0734569A6A693BC8194DE62BF = 16; $TC1D9F50F86825A1A2302EC2449C17196 = ""; $TDD7536794B63BF90ECCFD37F9B147D7F = strlen($TF186217753C37B9B9F958D906208506E); $TFF44570ACA8241914870AFBC310CDB85 = __FILE__; $TFF44570ACA8241914870AFBC310CDB85 = file_get_contents($TFF44570ACA8241914870AFBC310CDB 85); $TA5F3C6A11B03839D46AF9FB43C97C188 = 0; preg_match(base64_decode("LyhwcmludHxzcHJpbnR8ZWNobykv"), $TFF44570ACA8241914870AFBC310CDB85, $TA5F3C6A11B03839D46AF9FB43C97C188); for (;$T3A3EA00CFC35332CEDF6E5E9A32E94DA<$TDD7536794B63BF90ECCFD37F9B147D7F;) { if (count($TA5F3C6A11B03839D46AF9FB43C97C188)) exit; if ($TDFCF28D0734569A6A693BC8194DE62BF == 0) { $TF623E75AF30E62BBD73D6DF5B50BB7B5 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $TF623E75AF30E62BBD73D6DF5B50BB7B5 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]); $TDFCF28D0734569A6A693BC8194DE62BF = 16; } if ($TF623E75AF30E62BBD73D6DF5B50BB7B5 & 0x8000) { $T7FC56270E7A70FA81A5935B72EACBE29 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 4); $T7FC56270E7A70FA81A5935B72EACBE29 += (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]) >> 4); if ($T7FC56270E7A70FA81A5935B72EACBE29) { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) & 0x0F) + 3; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $T0D61F8370CAD1D412F80B84D143E1257++) $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1 D412F80B84D143E1257] = $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012-$T7FC56270E7A70FA81A5935B72EACBE29+$T0D61F8370CAD1 D412F80B84D143E1257]; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } else { $T9D5ED678FE57BCCA610140957AFAB571 = (ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) << 8); $T9D5ED678FE57BCCA610140957AFAB571 += ord($TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]) + 16; for ($T0D61F8370CAD1D412F80B84D143E1257 = 0; $T0D61F8370CAD1D412F80B84D143E1257 < $T9D5ED678FE57BCCA610140957AFAB571; $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012+$T0D61F8370CAD1 D412F80B84D143E1257++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA]); $T3A3EA00CFC35332CEDF6E5E9A32E94DA++; $T800618943025315F869E4E1F09471012 += $T9D5ED678FE57BCCA610140957AFAB571; } } else $TC1D9F50F86825A1A2302EC2449C17196[$T800618943025315F869E4E1F09471012++] = $TF186217753C37B9B9F958D906208506E[$T3A3EA00CFC35332CEDF6E5E9A32E94DA++]; $TF623E75AF30E62BBD73D6DF5B50BB7B5 <<= 1; $TDFCF28D0734569A6A693BC8194DE62BF--; if ($T3A3EA00CFC35332CEDF6E5E9A32E94DA == $TDD7536794B63BF90ECCFD37F9B147D7F) { $TFF44570ACA8241914870AFBC310CDB85 = implode("", $TC1D9F50F86825A1A2302EC2449C17196); $TFF44570ACA8241914870AFBC310CDB85 = "?".">".$TFF44570ACA8241914870AFBC310CDB85."<"."?"; return $TFF44570ACA8241914870AFBC310CDB85; } } } } eval(T7FC56270E7A70FA81A5935B72EACBE29("QAAAPCFET0NUWVBFIGh0bWwgUAAAVUJMSUMgIi0vL1czQy8vRA AAVEQgWEhUTUwgMS4wIFRyYQAAbnNpdGlvbmFsLy9FTiIgIgAA aHR0cDovL3d3dy53My5vcgLIZy9UUi94BMExA9EAtC10A6guZH QICGQiPjwCQSB4bWxucz0Eby8xOSAKOTkD0yI+Cjw/cGhwCgAQJAfgZRAAMT0iBPBmaWFucHJvLmlyIjsAIAokWERBWS A9IDMAsGRhdGV4AAA9KCIyMDEyLTA5LTExIDIwIgI6MAAxIik7 BFAKCiRUaW1lAvAoAiBzdHJ0b3QA0CgiJAOCIikgKyBARCgE8i o4NjQwMCkDMGlmKAMiPj2AAAKyKSl7fQplbHNlIHsKZWNoABRv ICI8dGl0bGU+IBIAdglwLjEgATAwADBAWWFob28uY29tPC8CE8 BBCqADFHA+PGJyPjwAdGNlbnRlAPAAAGZvbnQgc2l6ZT00IGNv bG9AEHIKQHJlZD5Zb3VyIAfBIGlzIAAEZmluaXNoZWQgVG8gdQ hQU2MAEHJpcHQgLCBQbGVhAQByZS1wCAR1cmNoAMFGcm9tICA8 LwWRPiBgrDwAcQWTPWJsdWUGszMIsD4LrwukYj6QAAPkPC8KYj 4iOyAKZXhpdDsKfYAAFMAvLyBHZXQgT3JnaW5hbCAAA0RvbWFp bgokZG90bj0wGNAIcBAAcmU9FnBsZW4oJF9TRVJWRVIABFsnSF RUUF9IT1NUJ10WAGZvBlByKCRpcwMQAGA8JANCOwCwKyspCgYg ewoJaWYZIAO/J11bAkBdPT09JwUCLicpCgkCoAkHkisrOwoJfQnwJACsZXhwbG 9kZT0AhCgCkCwIXwhTCSSKNwvTUDE9A4VbBPItMV0FAAHlMgHs AcApUjLAb2snMAJVMS4ApTInMxJwUGhhcnNlDyMgSUYKJPANEC yhA1A9PQPyMSkgJW8jU/9HJW8lbyVvJOAbAgCAH2Ilbz4jBEJ1eRwGJMQjcu9DH4QjbwSy MyNvLwgjbyNqPz0waGVhZABwDkMAANmG2LXYqCDYqNin2LLbjC AADNiq2LHYp9mI24zZhivwAlMKPACMbGluayByZWwlEHlsZTBQ J7B0eSAAcGVBEGV4dC9jc3MiIGhyZWYqAT0iKHEuAQEvBkBtZX RhIG5hbQKAYARjNiA20C1sYW5ndWFnZSIw8G50gwABID0iZW4i AtZNYS1lcXVpdj0iXJBDAzRUBpAC+EZQdC9MQTsgKxFzZXQ9Bk B1dGYtOARfBFFpbQbQdG9vbGJhSUByBFhubwLyc3QM8CAMrW1l ZGlhPQehInNjcmUJwDiAAnINAC8TxGJvZHkA8AAFZGl2IGlkPS JsdG9wMVLhLwEgAAk+PCEtLUVuZCBvZiABki0tArkDzG1pZGFs bFhgArAD0wEgbGMD4QEmbGUBCWZ0Ij4JCjwBJm1lbnUCMXVsBM DIQFlCLZBDMkpgQ3VychRgIHN0ZXAKoBUBUTMBUFByZXZpb3Vz AWcxAWBOGrDMCgEjMJBpcxOQQZBHRVRbJ3NA4ClVUAkDIHN3aX RjaAF5AWEJY00xMToKCQmAAC8EbGkgY2xhc3M9XCJjMyBmAAI5 XCI+2KrZiNi22YrYrSSwqgKAPC9saT48AnkyAnaG2LjZitmF0r ACdwLOMQLD2b4osIoAQIYE8lxQCQlichn/ZWFrQXAJQzI6CU8JTwlPC74JTwwNCU8LcQlIN/8JCQjAEqIzCW8SrxKvFR8JbwlvF9ISrxKmWSNzZJ/wHA8iYxmXHA8eeBAEHnAJbh55AnQJH30KPz4eYwo8LywiMoMAY i5ZaWQ0Yi9naWQyL2EvEVgBIFvhIStvKgBpbmNsdWRlKCJnOwA 88XQuiyBfwYKmLV8pexqlLUIEBkpAZmlnBBWxPRQmCSbIAsQgK CIz8HVwAs8CwyAiAsQoThB/B2QCn3KBESIO8EYwAGEQyHJpZ2h0EOISZEgyMYAgbUmqS50+I2 xE0EXwe3dpZHRoOgB1OTUwcHg7fTwvA9IX4QZhPAUiPEpoiVAD UyAmIAPxbGNLEi9OQjxWkj4=")); ?>

aliforever
سه شنبه 07 شهریور 1391, 19:40 عصر
با base64 انکد شده تو گوگل بنویسید :
base64 decoder
میاره

Tarragon
سه شنبه 07 شهریور 1391, 20:22 عصر
زدم نتونستم هیچی پیدا کنم می شه کمکم کنید؟

Tarragon
جمعه 10 شهریور 1391, 11:23 صبح
من دیکد کردم اما خیلی دیکدش خرابه می شه کمک کنید؟
یعنی تقریبا هیچی خونده نمی شه نظر شما چیه؟
ممکن یه نوع انکد دیگه باشه؟

MostafaEs3
جمعه 10 شهریور 1391, 14:34 عصر
:چشمک::چشمک::چشمک:



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml">
<?php



$site1="trafianpro.ir";
$XDAY = 3;
$datex=("2012-09-11 20:00:00");




$Time = (strtotime("$datex") + ($XDAY*86400));
if($Time>=time()){}
else {
echo "<title> Travian.100100@Yahoo.com</title>";
echo "<p><br><p><br><center><font size=4 color = red>Your time is finished To use Script , Please re-purchase From </font> <font color=blue size=3><b>Travian.100100@Yahoo.com<b></font></cente>";
exit;
}


// Get Orginal Domain
$dotn=0;
$chare=strlen($_SERVER['HTTP_HOST']);
for($is=0;$is<$chare;$is++)
{
if ($_SERVER['HTTP_HOST'][$is]==='.')
{
$dotn++;
}
}
$explode=explode('.',$_SERVER['HTTP_HOST']);
$DomainP1=$explode[$dotn-1];
$DomainP2=$explode[$dotn];
$siteok=("$DomainP1.$DomainP2");


// Pharse IF
if( ($siteok===$site1) ){}
else {
echo "<title> Travian.100100@Yahoo.com</title>";
echo "<p><br><p><br><center><font size=4 color = red>Please Buy Orginal Script From </font> <font color=blue size=3><b>Travian.100100@Yahoo.com<b></font></cente>";
exit;
}


?>
<head>
<title>نصب بازی تراوین </title>
<link rel=stylesheet type="text/css" href="main.css"/>
<meta name="content-language" content="en"/>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta http-equiv="imagetoolbar" content="no"/>
<style type="text/css" media="screen"></style>
</head>
<body>
<div id="ltop1">
</div><!--End of ltop1-->
<div id="lmidall"><div id="lmidlc">
<div id="lleft">
<div id="lmenu">
<ul>
<?php
// C2 = Current step
// C3 = Previous step
// C1 = Next step
if(isset($_GET['s'])) {
switch($_GET['s']) {
case 1:
echo "<li class=\"c3 f9\">توضيحات</li><li class=\"c2 f9\">تنظيمات</li></li><li class=\"c1 f9\">پايان</li>";
break;
case 2:
echo "<li class=\"c3 f9\">توضيحات</li><li class=\"c3 f9\">تنظيمات</li></li><li class=\"c1 f9\">پايان</li>";
break;
case 3:
echo "<li class=\"c3 f9\">توضيحات</li><li class=\"c3 f9\">تنظيمات</li></li><li class=\"c1 f9\">پايان</li>";
break;

}
}
else {
echo "<li class=\"c2 f9\">توضيحات</li><li class=\"c1 f9\">تنظيمات</li><li class=\"c1 f9\">پايان</li>";
}
?>
</ul>
</div></div>
<div id="lmid1">
<div id="lmid2">
<?php
if(!isset($_GET['s'])) {
include("greet.php");
}
else {
switch($_GET['s']){
case 1:
include("config.php");
break;
case 2:
include ("setup.php");
break;
case 3:
include("end.php");
break;
}
}
?>
</div></div>
<div id="lright1">
</div>
<style media="screen" type="text/css">#lmidall{width:950px;}</style>
</div></div><!--End of lmidall & lmidlc-->
</body></html>

Tarragon
جمعه 10 شهریور 1391, 16:45 عصر
اقا اگر می شه یادم بدید چطوری دیکد کردید خیلی ممنون می شم

Tarragon
جمعه 10 شهریور 1391, 18:08 عصر
راستی یادم رفت بپرسم این base 64 e?
اگر نیست چه نوع دیکدیه؟

MMSHFE
شنبه 11 شهریور 1391, 01:53 صبح
راستی یادم رفت بپرسم این base 64 e?
اگر نیست چه نوع دیکدیه؟
بله base64 هست ولی یه جورایی اومده پیچونده قضیه رو. اینجا (http://barnamenevis.org/showthread.php?358868-%D9%85%D8%B4%DA%A9%D9%84-%D8%A8%D8%A7-%D8%AF%DB%8C%DA%A9%D8%AF-%D9%BE%DB%8C-%D8%A7%DA%86-%D9%BE%DB%8C&p=1583061&viewfull=1#post1583061) رو ببینید. توضیح دادم چطور دیکدش کنید.